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RECORDING OF SCRAMBLED DIGITAL DATA 



The present invention relates to a method and apparatus fof transmission and recording of scrambled 
digital data, for example broadcast audio data. 

Transmission of scrambled or encrypted data is well-known in the field of pay TV systenrts, where 
scrambled audiovisual information is broadcast e.g. by satellite to a number of subscribers, each 
subscriber possessing a decoder or recerver/decoder capable of dcscrambling the transmitted 
program for subsequent viewing. 

In a typical system, scrambled digital data is transmitted together with a control word for descrambling 
the digital data, the control word itself being encrypted by a first key and transmitted in encrypted form, 
the scrambled digital data and encrypted code word being received by a decoder possessing an 
equivalent of the first key necessary to decrypt the encrypted control word and thereafter descramble 
the trar^mitted data. Usually, the conb-oJ word changes every 10-16 seconds. A paid-up subscriber 
will receive on a monthly basis a message including the key necessary to decrypt the encrypted 
control words so as to permit viewing of the broadcast progranns. 

With the advent of digital technology, the quality of the transmitted data has increased many times 
over. A particular problem associated with digital quality data lies in its ease of reproduction. Where a 
descrambled program is passed via an analogue link (e.g. the "PerrteP link) for viewing and recording 
by a stafMJard VCR the quality remains no greater than that associated with a standard analogue 
cassette recording. The risk that such a recording may be used as a nriaster tape to make pirate 
copies is thus no greater than with a standard shop-bought analogue cassette. 

By way of contrast any descrambled digital data passed by a direct digital link to one of the new 
generation of digital recording devices (for example, a DVH5 recorder) will be of the same quality as 
the orlginaJly transmitted program. It may thus be reproduced any number of fimes without any 
degradation of image or sound quality. There is therefore a considerable risk that the descrambled 
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data will be used as a master recording to n^ake pirate copie$. either further digital copies or even 
simple analogue VHS copies. There may nevertheless be certain drcumstances in which a legitimate 
user may be permitted to download and record pre-paid audiovisual data, notably audio data (selected 
extracts from a piece of music, an album or CD etc,). 

It is an object of the present invention to enable such a system to be put in place in a secure manner, 
so as to permit authorised recording of transmitted digital data, whilst minimising the risk of pirate 
copied of such recordings being made by unaulborised third parties. 

10 According to the present inventfon there is provided a system for transmission and recording of digital 
data, comprising transmission means adapted to prepare and transmit scrambled digital data together 
with at least one encrypted control word and a digital recording device adapted to receive and record 
the scrambled digital data and encrypted control word on a digital support, the digital recording device 
further including an access control means adapted to decrypt the control word and thereafter 
1 5 descramble the digital data during playback. 



In this way, the present invention permits the free transmission of digital data since the data in 
question wHl be transmitted and recorded in scrambled form on the digitel support medium^ and may 
only be accessed thereafter in conjunction with the recording device and associated access control 
module. 

The terms •'scrambled" and "encrypted" and "control word* and "key* have been used here and 
throughout the text for the purpose of clarity of language. However, it will be understood that no 
fundamental distinotion is to be made between ''scrambled data" and ""encrypted data" or between a 
25 **control word" and a Tcey*. 

The eccess control means may t>e permanently integrated in the recording device. However, in some 
embodiments it may be envisaged that the access control means are incorporated in a discrete 
module* for example as a smart card on SIM card, insertable in the reo^rding device to permit 
30 decryption and descrambling of the recorded data upon playback. 
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Whilst the recording device may integrate the receiver means needed to receive the transmitted digital 
data e.g. via a modem link, in one embodiment the sysiem further comprises a separate 
receiver/decoder adapted to receive the transmitted digital data and encrypted code word and to 
5 communicate this infomnation to the recording device for subsequent recordal. 

In this embodiment, the receiver/decoder may be a standard type as known from the field of digital 
television broadcast and adapted to receive broadcast audio and/or visual data (scrambled and in 
dear) as well as data sent for example, via a modem link to the receiver/decoder. The 
10 receiver/decoder may also be integrated with other devices such as digital television, DVHS recorder 

Broadly speaking, the system may funcUon in two possible modes of operation: a cyclical transmission 
mode and a transmission on demand mode. In the case of a cydtcal transmission mode, the 
15 transmission means is adapted to repetilh/eiy transmit the scrambled digital data and encrypted code 
word- 

In such a mode, the control word for the data is preferably encrypted by a first key associated with the 
identity of the data beir>g transmitted. For example, in the case where a number of pieces of music 
20 are being transmitiea in a repeating cycle, the control word or words needed to descrambie data 
'^^^ fbr each recording are encrypted by a key specific to that particular piece of music. The number of 
control words r>eeded nnay depend on the length of the piece of music. 

The equivalent of the key needed to decrypt the control word may be communicated to the access 
25 control meBfrs in a number of ways, for example, simply by transmission 'in clear" over a telephone 
network or the like. Preferably, however, the first key is encrypted by a second key before 
communicafion to the access control means. 

In such an embodiment, the system may further comprise a key encryption means adapted to encrypt 
30 the equivalent first key by a second key before communication to recording device, the access control 
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means possessing an equivalent of the second key so as to permit the decryption of the firet key and, 
thereafter, the decryption of the control word and subsequent descramblmg of the transmitted data. 

The key encryption means may be integral wtth the transmission means and the associated circuitry 
5 for scrambling the transmission etc. However, it may equally be associated with a separate database 
and server containing 0 list of keys associated with each access control means and recording device. 

In the case where the system comprises a receiver/decoder unit, the receiver/decoder unit nr^ay be 
adapted to request a first key from the key encrypUon means, the key encryption means thereafter 
^n^y^-rtting the encrypted first key to the receiver/decoder for subsequent communication to the 
recording device and access control moduie. 



For example, the key encryption means may respond to a request received from the receiver/decoder 
via a modem channel by returning information on this channel. Alternatively, the information may be 
15 commumcated to the transmission means for subsequent transmission, for example, in a broadcast 
trar)smission. 

The above cyclical transmission embodiments have been discussed in partlailar in relation to systems 
in which the key used to encrypt the control word is directJy associated with the identity of the data 
20 (e.g. the particular song or piece of music) transmitted. 

m an alternative embodiment, the same first key is used to encrypt the control word or words 
associated with a plurali^ of sets of data. For example, all pieces transmitted during a particular 
period of time, such as during a month's subscription, may use the same first encryption key to 
25 encrypt control word data. 

Similarly, whilst the first key is normally sent in response to a request from a user, in one embodiment 
the first key is repetitively transmitted by the transmission mearw in a message encrypted by a second 
key. 

30 
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slWr subscriber he$ suffiaent rignts to recciv^n 



The verification that the useWf subscriber he$ sufficient rights to rece'iv^nd record, for example, a 
month's worth of data may be handled upstream at the transmission. Only those subscribers having 
paid the necessary subscription will receive the key for that month, as encrypted by their personalised 
second key and sent by the transmission means. 

5 

In addition, in some embodiments, the access control module may further include a credit means for 
monitoring the number of recordings made by the recorder, for example, during a month's worth of 
credit. In this case, a number of credits may be communicated together with the first key information 
to the recorder device each month, each recording resulting in the reduction of a credit held by the 
10 recording device. 



The above embodiments have been discussed in relation to a cyclical mode of transmission, in an 
alternative on-demand mode, the transmission means responds to a realtime request to transmit the 
scrambled digital data and encrypted control word. 



Whilst being more complicated to manage in ternr^ of the received requests, the on-demand 
embodiment may permit a simplification of the encryption process. In particular, in one embodiment, 
the control word is directly encrypted by a Rrst key, the access control means possessing an 
equivalent of this key to penmit the decryption of the control word and subsequent descrambling of the 
20 data. 



The real-time request may be communicated to the transmission means by a receiver/decoder 
connected to the recording device. Alternatively, a request may be made by telephone, minitei etc. 



25 The transmission means may be adapted to fransmit data to the recorder via any number of 
communication channels, for example, via a fixed telecommunications network. However, the 
invention is particularly appifeaWe to broadcast transmission Of prifnarily audiovisual or multimedia 
d^ital data, notably audio data. The present invention may also be used in conjunction with many 
types of digital recording devices. 
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In one preferred embodiment, the transmission means is adapted to transmit digital audio data. In 
such an embodiment the recording device may conveniently comprise a mini disc recorder adapted to 
include access control means as described above. 

6 The present invention equally extends to a recording device for use in a system as described above 
and a method of transmission and recording of scrambled data. 

Other general and preferred features of the first and second aspects of the invention will be apparent 
from the description of the various exemplary embodiments. In this regard, there will now be 
1 0 described, by way of example only, a number of embodiments of the present invention, with reference 
to the attached figures, in which: 

ngure 1 shows an overview of a digital television system adaptable for use in the present Invention; 
1 5 Rgure 2 shows the elements of the receiver/decoder of Figure 1 ; 

Figure 3 shows a first embodiment of the invention including a recording device for recording 
transmitted scrambled data; 

20 Figure 4 shows the recorded data associated with the embodiment of Figure 3; 

Figure 5 shows a second embodiment of the invention adapted to use the prindple of a series of 
prepaid tokens; 

25 Rgure 6 shows the recorded data associated with the embodiment of Figure 5; 

Figure 7 shows a third embodiment of the embodiment in whicn data is supplied on demand: and 
Rgure 8 shows the recorded dala associated with the embodiment of Figure 7. 

30 



In the embodiments of Figures 3 to 8. the present invention wiH be discussed in relation to the 
broadcast transmission of saamWed data and its subsequent recordal. A digital television system and 
decoder for use in such a context will now be described in relation to Rgures 1 and 2. 



An overviews of a digital television system 1 according to me present invention is shown in Figure i. The 
invention includes a mostly conventional digital television system 2 that uses the knovvn MPEG-2 
compression system to transtnit compressed digital signals, in more detail. MPEG-2 compressor 3 in a 
broadcast centre receives a digital signal stream (typically a stream of video signals). The compressor 3 is 
connected to a multiplexer and scrambler 4 by linkage S. 

The multiplexer 4 receives a plurality of further input signals, assembles the transport stream and 
transmits compressed digital signals to a transmitter 6 of the broadcast centre via linkage 7. which can of 
course take a wide variety of fon^s including telecommunications linKs. The transmitter 6 transmits 
electromagnetic signals via uplink 8 towards a sateJlite transponder 9. where they are electronically 
processed and broadcast via notional downlink 10 to earth receiver 12. conventionaUy in the form of a 
dish owned or rented by the end user. The signals received by receiver 12 are transmitted to an 
integrated receiverWecoder 13 owned or rented by the end user and connected to the end user's 
television set 14. The receiverfdecoder 13 decodes the compressed MPEG-2 signal into a televisten 
signal for the television set 14. 

Other transport channels for transmission of the data are of course possible, such as terrestrial broadcast, 
cable transmission, confined satellite/cable finks, telephone networtw etc. 

In a rnulBchannel system, the multiplexer 4 handles audio and video information received liiom a number 
of parallel sources and interacts with the transmitter 6 to broadcast the inforrDation along a coiresponding 
number of channels. In addition to audiovisual infomiation. messages or appikatlons or any other sort of 
digital data may be introduced in some or all of these channels interlaced virith the transmitted digital audio 
and video information. 




A awiditional access system 15 is connected lo the multiplexer 4 and the receiver/decoder 13, and is 
located partJy in the broadcast centre and partly in the decoder. It enables the end user to access digital 
television broadcasts from one or more broadcast suppliers. A smartcard. capable of deciphering 
messages relating to commercial offers (thai te, one or several television programmes sold by the 
5 broadcast supplier), can be inserted into the receiver/decoder 13. Using the decoder 13 and smartcand. 
the end user may purchase commercial offers in either a subscription mode or a pay-per-view mode. 

AS mentioned above, programmes transmitted by the system are scrambled at the multiplexer 4, the 
condiUons and encryption keys applied to a given transmission being determined by the access control 
10 system 15. Trar^ission of scrambled data in this way is well known in the field of pay TV systems. 
Typically, scrambled data is transmitted together with a control word for descrambling of the data, the 
control word itself being encrypted by a so-called exploitation key and transmitted in encrypted form in 
an ECM (Entitlement Control Message). 

1 5 The scrambled data and encrypted control word are then received by the decoder 1 3 having access to 
an equivalent of the exploitation key stored on a smart card inserted In the decoder to decrypt the 
encrypted ECM and control word and thereafter descramble the transmitted data. A paid-up 
subscriber win receive, for example, in a broadcast monthly EMM (Entitlement Management Message) 
the expteitation key necessary to decrypt the encrypted control word so as to permit viewing of the 

20 transmission. 

An interactive system 16. also connected to the multiplexer 4 and the receiver/decoder 13 and again 
located partly in the broadcast centre and partly in the decoder, enables the end user to interact with 
various applicatfons via a modem back channel 17. The modem back rfiannel may also be used for 
25 communications used in the conditional access system 15. An Interactive system may t)e used, for 
example, to enable the viewer to communicate immediately with the transmission centre to demand 
authorisation, to watch a particular event, download an appBcation etc. 
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Referring to Figure 2, the 




m\s of the receiver/decoder 13 or seWop 




adapted to be used in the 



present invention will now be described. The elements shown in this figure will be described in terms 
of functional blocks. 

The decoder 13 comprises a central processor 20 including associated memory elements and 
adapted to receive input data from a serial interface 21, a parallel interface 22. a modem 23 
(connected to the modem back channel 17 of Rg i)» and switch contacts 24 on the front panel of the 
decoder. 

The decoder is additionally adapted to receive inputs from an infra-red remote control 25 via a control 
unit 26 and also possesses two smartcard readers 27, 28 adapted to read bank or subscription 
smartcards 29, 30 respectively. The subsaiption smartcard reader 28 engages with an inserted 
subscriptkjn card 30 and with a conditional access unit 29 to supply the necessary control word to a 
demultiplexer/dcscrambler 30 to enable the encrypted broadcast signal to be descrambled. The 
decoder also includes a conventional tuner 31 and demodulator 32 to receive and demodulate the 
salelJife transmission before being filtered and demultiplexed by the unit 30. 

Processing of data v^ithin the decoder is generally handled by the central processor 20* The software 
ar^itecture of the central processor may correspond to that used in a known decoder and will not be 
described here in any detail. It may be based, for example, on a virtual rr^chine interacting via an 
interfece layer with a lower level operating system implemented in the hardware components of the 
decoder- In tenms of the hardware architecture, the decoder will be equipped wrth a processor^ 
memory eleraents such as ROM, RAM, FLASH etc. as in known decoders. 

In the case of received audio and video signals* and as will be described in more detail below, the 
MPEG packets containing these signals will be demultiplexed and filtered so as to pass real time 
audio and video data in the form of a packetised elementary stream (PES) of audio and video data to 
dedicated audio and video processors or decoders 33, 34. The converted output from the audio 
processor 33 passes to a preamplifier 35 and thereafter via the audio output of the receiver/decoder. 




The converted output from the vWeo processor 34 passes via a graphic processor 36 and 
PAL/SECAM encoder 37 to the video output of the receiver/decoder. 

The graphic processor 36 additionaUy receives graphic data for display (such as generated images 
s etc) from the central processor 20 and combines this information with information received fronrj the 
video processor 34 to generate a screen display combining moving images together with overlaid text 
or other images. 

In the case of received teletext and/or subtitle data, the conversion of the real time PES data to 
10 generate the appropriate images may also be handled by dedicated processors. However, in most 
conventional system?, this is handled by the genera! processor 20- 

The system described above in relation to Figures 1 and 2 has been set out in relation to the 
broadcast and reception of television data. As will now be described, the system is equally adaptable 
15 to the broadcast, for example, of exclusively audio data, the decoder functioning in this case as a 
digital radio receiver 

Whilst the following description concentrates on the reception and reoordal of audio data, the same 
principles may be easily applied to audiovisual or other digital multimedia data transmitted and 
20 received for example vte the decoder. Similarly, whilst the embodiment will be discussed in particular 
in relation to a mini disc reader/recorder device, the same principles may be applied to DVHS readers. 
CO ROM devices, etc. The recerver/decoder may itself tntegrate such recording devices, 

Retening now to Figure 3, the decoder 13 is connected, via a IEEE 1394 bus 40 to a digital recording 
2S device 41 . such as a mini disc reader, adapted to receive and record audio infonmation received by the 
decoder 13* The device 41 is further adapted to include an access control module 42. the operation of 
which will be described in detail below. This access control module 42 con-esponds in many ways to 
the smartcard and conditional access module 29 nomially used to descramble broadcast television 
transmissions. Specifically, encrypted audio data recorded on a digital recording support in the form 
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by the dcc^s control module 42 and^^^c 



of a mini disc 43 is descramrod by the access control module 42 and pissed to an audio processor 
44 before eventual outpui to a pair of headphones or loudspeaKer 45. 

In view of the reduced data flow of audio data in comparison with a full audiovisual television signal, 
the access control module 42 can be realised in the form of a single chip containing all the elements 
necessary to receive a scrambled signal and output a clear signal, including the necessary 
cryptographic key or keys (see below) and associated descramblmg circuStry. This chip may be 
integrated within the recording device 41 or may be embodied in a SIM card or similar insertable in a 
slot in the device. 

m this embodiment a particular title or piece of music (a song, set of songs, etc.) avaOable to be 
recorded is scrambled prior to transmission by a control word. In the same manner as for a television 
broadcast, scrambling fs earned out using a control word which changes every 10-15 seconds or so. 
Each control word (and other data, if desired) Is encrypted using an encryption key Kt associated with 
the identity of the piece of music for example the title of the song concerned, so as to form a 
characteristic ECM message. 

The audio data and associated ECM messages are sent cydically by the transmitter 6- That is, this 
data ts broadcast continuously (or at least at regular intervals) to a field of decoders. In the event that 
a user decides to purchase this title, for example, by selecting the titie from a menu of available tiUes 
using the decoder remote conttt)!, the decoder 13 sends a message 51 to the access control server 15 
and ciphering unit 50. The message includes information relating to the title of the piece of music, the 
Identity of the recording device 41 »>at vwll be used to nscord the data and the identity of the 
customer's decoder 13. 

As described above, the ECM containing the control word needed to descramble the audio information 
is encrypted using a key associated witi^ the title of the piece of music. The ciphering unit 50 
possesses Oie equivalent of the key Kl needed to decrypt the ECM message as well as a key W 
associated with the identity of the mini disc reader and, more particuterty. w\\h the access control 
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moaule 42 which possesses ihe equivalent decryption key. The key Kl (and other data, if desired) is 
encrypted by the key Ki and the resulting EMM message 52 sent via the server 52 to the decoder 1 3, 

The communication of identity of the decoder 13 to the server 15 is not needed in the 
encryption/decryption process but may be used in the eventual billing to the customer of his purchase 
of his piece of music. 

The EMM and the data to be recorded (as downloaded by the decoder from the MPEG broadcast 
stream) are sent via the bus 1394 to the mini disc/reader recorder 41. As will be appreciated the EMM 
message, the data to be recorded and the associated ECM are all sent in encrypted or scrambled 
form on the bus 40 and are unreadable to any third party not possessing the keys Kt, Ki. 

The data transmitted to the mini disc reader 41 are thereafter combined at 47 and recorded on the 
disc 43 in the form shown In Figure 4. in particular, each recording comprises a header 60 containing 
general information regarding the recording, an EMM section 61 containtng the EMM, and one or more 
sections 62 containing the scrambled audio data segments each with the associated ECM containing 
the control \/^or6 necessary to descramble the data. 

As nnentioned above* in this embodiment, the piece of music to be recorded is transmitted 
CTDntinuously in a transmission cyde. In order to enable »ie decoder 1 3 to start downloading the piece 
at any time once it has been selected by the user, the mini disc device 41 may addttionally be supplied 
vwth a buffer type memory 46. The individual segments making up the piece of musfc may be 
downloaded in any order (for example, starling in the middle of the piece) and thereafter re-arranged 
in the correct order to be recorded on the disc 43 ir> the correct order together with the EMM message 
as shown fn Figure 4, 

When replaying the recording, the access control module vwll decrypt the EMM. using its equivalent of 
the key Ki, and thus obtain the equivalent of the key Kt assodated with the encryption of the ECMs, 
Each ECM i$ then decrypted with the equivalent key Kt to obtain the control word needed to 
descramble that segment of audio data. The algorithnrw used to generate the keys Kt, Ki and their 
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equivalent may correspon^o any known symmetric algorithm suZFT as, for example. D6S. 
Alternatively, in some cases public/private key pairs such as are known from the RSA algorimm may 
be used. 

As menUoned above, in view of the relatively low data rate associated with audio information, ell these 
operations, including the descrambiing itself, may be canied out within a single chip. Alternatively, 
some or part of the process may be earned out separately. For example, the access control module 
may simply supply a decrypted control word stream in association with the scrambled audio data to a 
separate descrambler unit. 

The use of a control word adapted to change every 10-15 seconds is a concept knovtm from the field 
of television broadcasts. In the present case and given that the average length of a scrambled piece 
Of music may be only minutes, the structure may be simplified, for example, to have only a single 
contnsl word and ECM for any given piece of music 

It is even possible to imagine a situation in which the use of an EMM is dispensed wrtth and the server 
1 5 sends in clear the key Kt necessary to decrypt a given piece of music in response to a request from 
the decoder. For obvious reasons, the security of such a system would be extremely low, since all 
information needed to decrypt a piece of music would be present in dear in transmission or as 
recorded on the disc 43. and such an embodiment would deter only the most basic level of fraud. 

As described, an EMM is requested by a command from the decoder 13 to the server 15 and unit 15 
and returned by the same modem channel. As will be appreciated, other communication channels 
may be used. For example, the user may command an EMM via the telephone or Minitel, and the 
EMM may be generated and sent, for example, in the MPEG flow via the satellite link. 

The embodiment of Figures 3 and 4 relies on the principle of association of a key Kt with a particular 
set of data or piece of music and the communication of this key for example in a specific EMM 
generated in response to a request. Figures S and 6 show an alternative embodiment, again using the 




cyclical transmission of the audio data, but based on the prindplc of subscription together with the use 
of a number of predetennined credits. 

In this embodiment, the connection between the decoder 13 and the server 15 and unit 30 is not 
5 shown, since the mini disc reader 41 receives (upon connection to the decoder 13) a regularly 
transmitted EMM message containing the exploitation key Ke needed to decode thdt month's ECMs 
(i.e. the ECMs associated with all the pieces transmitted during ttiat month) together with a number of 
credits. 

10 In parliculaf, the key Ke is encrypted by the key Ki associated with a particular reader 41 to create an 
EMM. Upon connection to the decoder 13, the EMM message for that montt^ and associated with that 
read«^ 41 is recorded on the disk 43 together with the date and ECM messages relating to the chosen 
piece of music See Figure 6. where the numeral 63 designates the EMM message recorded in this 
embodiment. 

IS 

The transmission of an EMM assigned to a particular reader will of course depend on the user having 
taken the necessary steps to purchase the rights to download data for recordal. This may be handled^ 
for example* in a subscription system of the type described in relation to Ftgures 1 and 2, where the 
access control system 15 manages the list of subscribers or, more specifically, a list of decoders 
20 designated to receive certain broadcast programs. 

SirKe it is envisaged that many tities or pieces of music will be sent during a given month, and that a 
user may not have unlimited rights to record all titles, it may be necessary to use a credit system to 
monitor the nurr>ber of recordings tRal may be earned out. In such a case, the device 41 wUI record in 
25 the access control module 42 information regarding the recording in question, for example* data 
stocked in one or more ECMs transmitted wrtt> the title. Using an EEPROM memory of 4000 bytes, 
the access control rrKidule 42 can stock information relating to up to 1000 recordings. 
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Making a note of each time a recording is made enables the access control module to ensure that the 
number of recordings made per month does not exceed the number of credits transmitted in that 
month's EMM. Credits transmitted with EMMs niay be carried over from one month to the next. 

Upon replaying the recording, the access control module 42 decrypts the EMM using its equivalent 
key Ki. obtains the key Ke associated with the ECM for recordings in that month and thereafter 
decrypts individual ECM messages to obtain the control word \0 descramble each segment 

Price information may equally be included in the ECM. different priced recordings being offered in the 
same month. Again, this information may be recorded and used by the access control module 42 to 
manage the number of recordings that may be made by a given user. 

Whilst this embodiment avoids the need to generate in real-time a specific EMM in response to a user 
request, the memory space requirements of the access control module 42 increase greatly to track the 
recordings purchased. In an alternative realisation, this could be handled within the decoder 13. If so. 
two sets of keys would need to be used; one to encrypt/decrypt EMM transmissions from the 
transmitter 6 to decoder 13, and one to re^ncrypt EMM messages for subsequent routing to and 
decryption by the recorder de\^ce 41. 

Referring no^^ to Figures 7 and 8, a simpler eotbodiment of the present invention will now be 
described. In this embodiment a user who wishes to download and record a piece of music sends a 
request including the disc reader ID, the title of the piece of music and the decoder ID to a server 15- 
This request may be effected, for example, via the nwdem of the decoder 23- Equally, a request may 
be sent using a phone 48 or minrtel 49. 

Unlike previous embodiments, the piece of music is not broadcast cyclically but, instead, is only 
broadcast in response to an instruction from the server 15 to the transmitter 6. The transmitter 
scrambles the data prior to transmission with a changir^g control word and encrypts each control word 
(and other data, if desires) wfth a key Ki associated with the reader ID to prepare a user specific ECM. 
As before, the decoder ID is merely used for the purpose of billing the user. 



• • 



In this embodiment the information to be recorded on the disk 43 fe considerably reduced, as shown 
in Figure 8, and comprises simply a header 60 and a series of ECMs 64, Upon reading a recording, 
the access control module 42 uses its equivalent of the key Ki to decode each eCM and to obtain the 
5 control word needed to decode each data segment associated with the ECM, 
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CLAtMS 



1 , A system for transmission and recording of digital data, comprising transmission means adapted to 
prepare and transmit scrambled digital data together with at least one encrypted control word and a 
5 digital recording device adapted to receive and record the scrambled digital data and encrypted 
control vvord on a digital support, the digital recording device further including an access control 
means adapted to decrypt the control word and thereafter descramble the digital data during playback. 

2- A system as claimed in claim 1 in which the access control means are incorporated in a discrete 
10 module insertable in the recording device to permit decryption and descrambling of the recorded data 
upon playbacle 



3. A system as claimed in claim 1 or 2 further comprising a separate receiver/decoder adapted to 
receive the transmitted digital data and encrypted code word and to communicate this infbmnation to 

1 5 the recording device for subsequent recordai. 

4. A system as claimed in any preceding daim in which the transmission means is adapted to 
repetitively transmit the scrambled digital data and encrypted code word. 

20 5. A system as claimed in any preceding daim in which the control word for tne data is encrypted by a 
first key associated with the identity of the data being transmitted. 

6, A system as daimed in daim 5 in which the first key is encrypted by a second key before 
communication to the access conlrol means. 

7. A system as dain^ed in daim S or 6 further comprising a key encryption mear>s adapted to encrypt 
the equivalent first key by a second key before communication to recording device, the access control 
means possessing an equivalent of the second key so as to permit the decryption of the first key and* 
thereafter, the decryption of the control word and subsequent descrambling of the transmitted data. 

30 




8. A system as claimed in claim 7, further comprising a receiver/oecoder unit adapted to request a first 
key from the key encryption means, the key encryption means tf^ereafter transmitting the encrypted 
first key to tne receiver/decoder for sulssequent communication to the recording device ana access 
control module. 

9. A system as claimed in any preceding claim in which the same first Key is used to encrypt the 
control word or words associated with a plurality of sete of data. 

10. A system as claimed in any preceding claim in which the first key is repetitively transmitted by the 
transmission means in a message encrypted by a second key. 

1 1 . A system as claimed in any preceding claim, the access control module comprising a credit means 
for monitoring the number Of recordings made by the recorder and in which a number of credits are 
communicated to the access control module together with the encrypted first key. 

12. A system as claimed in any of claims 1 to 3 in which the transmission means responds to a real- 
time request to transmit the scrambled digital data and encrypted control word. 

13. A system as claimed in claim 13 in which the control word is directly encrypted by a first key. the 
access control means possessing an equivalent of this key to penDit the decryption of the control word 
and subsequent descrambftng of the data. 

14. A system as claimed in any preceding claim in which the transmission means is adapted to 
transmit audio data. 

15. A system as claimed in claim 14 in which the reconJing de>'ice comprises a mini disc recorder 
adapted to include access control means. 

16. A recording device for use in the system as claimed in any preceding daim. adapted to record 
scrambled data and an associated encrypted control word and comprising an access control means 
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adapted to decrypt the ri^fted control word and descramble red^^ scrambled data upon 
playback. 

17. A method of transmission and recordai of digital data in which a transmission means prepares and 
transmits digital data together with at least one control word, the transmitted scrambled data and 
encrypted control word being recorded by a digital recording device, the digital recording device 
comprising an access control means acting to decrypt the control word and thereafter descramble the 
digital data during playback. 




ABSTRACT 



RECORDING OF SCRAMBLED DIGITAL DATA 



5 A system for transmission and recording of digital data, comprising transmission means 6 adapted to 
prepare and transmit scrambled digital data together with at least one encrypted control word and a 
digital recording device 41 adapted to receive and record the scrambled digital data and encrypted 
control word on a digital support 43, the digital recording device 41 further including an access control 
means 42 adapted to decrypt the control word and thereafter descramble the digital data during 
10 playback- The present invention is particularly, but not exclusively, adapted to the transmission of 
scrambled audio data to be recorded on a mini disc reader 41 . 
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